Friends both digital and analogue:
Though this article pertains to a particular piece of legislation in Canada, I assure you that wherever you are your government is just as riddled with those who either are ignorant or feign ignorance and pass nonsensical policy.
In the Flipper Zero response there are some really nicely stated explanations of basic security issues. If you would take the risk of reading the comment section, you will see further expansion by the community. Regardless of where you might stand on the Flipper Zero in particular, similar devices, or even Canadian law, now is a good time for you to start thinking about the issues that are being addressed here.
The "right to repair" debate is pointing out how IP practices have become antithetical to both autonomy and security. Putting aside the autonomy and reasonable desire to repair and understand one's own belongings, if we are not legally allowed to understand the workings of processes and devices, then security audits are impossible. As the Flipper community points out, why are we banning a device when the auto industry (et al) has clearly not taken the best steps to create a secure environment for their customers? Though we should consider it necessary to help create a safer, more secure environment, it ultimately is the job of the professionals to do this properly.
Security (both in cyber and meat space) does affect you-- and more importantly: you affect security. So, maybe you think you are not a target or you have a good understanding of your own threat model. This does not mean that your ignorance, inaction, or lax security cannot cause problems for others. Bad actors target weak links. They are not going to attempt to compromise a multi-million dollar cyber defense system when all they have to do is compromise you.
I would never want to fear-monger, so I present hope. Do your best to be conscientious about your participation in anything where information is shared. Be as secure as you can. Educate yourself as much as you can. Doing only this already relieves a considerable amount of burden from the systems in which you participate.
And finally, push back on legislation that ignores the problem due to ignorance. If a car is insecure, why are we blacklisting devices that can point that out rather than demanding action by the auto industry? We must demand that those who make this policy understand the domain in which they create this policy or that they must defer to experts who do.
Never blame the smoke alarm for the fire.
Stay vigilant, my friends.
Ω∴Δ
